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1. Introduction 



In this article we develop counterexamples to the Hasse principle using only tech- 
niques from undergraduate number theory and algebra. By keeping the technical 
prerequisites to a minimum, we hope to provide a path for nonspecialists to this 
interesting area of number theory. The counterexamples considered here extend the 
classical counterexample of Lind and Reichardt. As discussed in an appendix, this 
type of counterexample is important in the theory of elliptic curves: today they are 
interpreted as nontrivial elements in the Tate Shafarevich group. 

2. Background 

The problem of determining if the Diophantine equation 

aX 2 + bY 2 + cZ 2 = (1) 

has nontrivial solutions with values in Z has played a prominent role in the history of 
number theory. We assume that a, b, and c are nonzero integers and, using a simple 
argument, we reduce to the case where the product abc is square- free. Lagrange 
(1768) solved the problem by giving a descent procedure which determines in a 
finite number of steps whether or not ([T]) has a nontrivial Z-solution, but Legendrc 
(1788) gave the definitive solution. Legendre proved that the following conditions, 
known by Euler to be necessary, are sufficient for the existence of a nontrivial Z- 
solution: (i) a, b, and c do not all have the same sign, and (ii) —ab is a square 
modulo \c\, —ca is a square modulo \b\, and —be is a square modulo \a\. Legendre 
then made interesting use of this result in the first attempted proof of quadratic 
reciprocity^ 



^Legendre's proof of quadratic reciprocity had gaps. The first complete proof was given by 
Gauss in his Disquisitiones Arithmeticae (1801). Equation JTJ also figures prominently in the 
Disquisitiones [4] Art. 294—300]; Gauss proves Legendre's theorem on the solvability of JT) using 
his theory of ternary quadratic forms. He then discusses the gaps in Legendre's proof of quadratic 
reciprocity. 

For a proof of Legendre's theorem on the solvability of JT) based on Lagrange's descent see 
[3 Ch. VII §3], [I Ch. 17 §3], or [16] Ch. II §XIV, Ch. IV Appendix I] (which gives historical 
background including Lagrange's role in the solution to the problem). For more on Legendre's 
theorem see [8] Ex. 1.8, 2.36], and various books on Diophantine equations. Lagrange's descent 
gives an explicit method for finding a solution if it exists; see Cremona and Rusin 2 for practical 
improvements on the descent method. 

Equation {TJ arises more often than it might at first appear. If F S Y, Z\ is a homogeneous 
quadratic polynomial, then F(X, Y, Z) = can be transformed to the form JT) (see |13l Thm. 1', 
Ch. IV]). As a consequence, the problem of determining if a conic, defined over Q, has a rational 
point reduces in a straightforward manner to the solvability of {TJ . 
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There was a large interest in generalizing Legendre's result to quadratic forms in 
arbitrarily many variables. Hasse's solution (1923) was formulated in a very elegant 
way using the p-adic numbers developed earlier by his teacher Hensel. 

To explain Hasse's result we will need to fix some terminology. A homogeneous 
polynomial of degree d is a sum of monomials that are all of total degree d; such 
polynomials are sometimes called forms of degree d. Consider the Diophantine 
equation 

F(X u ...,X m ) = (2) 

where F G Z[Xi, . . . , X m ] is a homogeneous polynomial of positive degree d. The m- 
tuple (0, . . . , 0) is a solution, but not an interesting one. The m-tuple (ax, . . . , a m ) is 
called nontrivial if at least one is nonzero. We are interested in finding necessary 
and sufficient conditions for the existence of nontrivial integer solutions to |2]). 
A nontrivial m-tuple (ai,...,a m ) G Z TO is said to be primitive if the greatest 
common divisor of a±, . . . , a m is 1. Observe that by homogeneity if ((5} has any 
nontrivial solution (in Z m , or even Q m ) it has a primitive solution. We extend this 
terminology in two ways: to systems of homogeneous polynomial equations, and 
to solutions modulo N. For example, a primitive solution modulo N is a primitive 
m-tuple of integers that solves the congruence F(X\, . . . , X m ) = modulo iV0 For 
systems and systems modulo N of homogeneous equations we do not require that 
the equations have the same degree. 

An easy way to show that ([2]) has no nontrivial Z-solution is to show that it has 
no nontrivial R-solutions. This trick only establishes the nonsolvability of the most 
blatant offenders: any interesting Diophantine equation will require some number- 
theoretic tools. The next-easiest way to show the nonsolvability of (J2J) is to show 
that it fails to have a primitive solution modulo N for some positive integer N. 
What is surprising is that in degree 2 these two techniques are all that is needed. 

Theorem 1 (Hasse's Theorem: version 1). If F G 1\X\, . . . ,X m ] is homogeneous 
of degree 2, then F(Xi, . . . , X m ) = has a nontrivial Z-solution if and only if 

(i) it has a nontrivial W-solution, and 

(ii) it has a primitive solution modulo N for all positive integers N . 

The assertion that (i) and (ii) are necessary and sufficient for the existence of 
nontrivial solutions is called the Hasse principle for polynomials of degree 2. 
The Chinese remainder theorem allows us to restate this result as follows. 

Theorem 2 (Hasse's Theorem: version 2). If F G Ti\X\, . . . ,X m ] is homogeneous 
of degree 2, then F(X\, . . . , X m ) — has a nontrivial Z-solution if and only if 

(i) it has a nontrivial W-solution, and 

(ii) it has a primitive solution modulo p k for all primes p and exponents k > 1 . 

When a homogeneous Diophantine equation or system of such equations has 
primitive solutions modulo all powers p k of a given prime p, we say that it is p- 
locally solvable. If it is p-locally solvable for every prime p and has nontrivial real 
solutions then we say that it is locally solvable. If it has a nontrivial Z-solution then 
we say that it is globally solvable. Global solvability clearly implies local solvability. 



Any m-tuple of integers solving F(X\, . . . ,X m ) = modulo N that is nontrivial with gcd 
prime to TV is congruent to a solution whose gcd is 1. Thus, if desired, one can relax the definition 
of primitive m-tuple modulo N to allow any nontrivial m-tuple whose gcd is prime to N. 
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The above theorem states that, for a certain class of equations, global solvability is 
actually equivalent to local solvability. 

Example 1 (m = 3). For equation ((T|), Hasse's theorem is a consequence of Le- 
gendre's theorem. See the exercises at the end of this section. 

Example 2 (m = 2). The equation aX 2 + bXY + cY 2 — has a nontrivial Z- 
solution if and only if the discriminant d = b 2 — Aac is a square, and has a primitive 
solution modulo an odd prime p if and only d is a square modulo p. So Hasse's 
theorem for aX 2 + bXY + cY 2 — is a consequence of the following theorem of 
Gauss: If an integer is a square modulo p for all odd primes p then it is a square 
[2 Art. 125]. 

In this case one only needs to check modulo p for odd primes p. One does not need 
to check for solutions for R, p = 2, and powers of odd primes. (The above theorem 
of Gauss extends to nth powers for n up to 7, but it does not extend to 8th powers 
since 16 is an 8th power modulo all primes^ As a consequence X 8 — 16Y 8 = has 
primitive solutions modulo p for all primes p, but does not possess a global solution. 
The equation X s — 16Y 8 — is not, however, a counterexample to a higher-degree 
Hasse principle: the solvability condition fails modulo 32.) 

Typically p-local solvability reduces to showing solvability modulo p k for some 
sufficiently large k. As Example illustrates, and as we will see in this paper, 
k = 1 is often enough. (See Appendix A for more on the phenomenon of "lifting" 
solutions modulo p to solutions modulo p k .) 

A natural setting for understanding solutions modulo p k as k varies is through 
the ring of p-adic integers Z p developed by Hensel. Using the ring Z p allows one 
to organize a coherent sequence of solutions modulo p k for all k into one p-adic 
solution. The field Q p of p-adic numbers is the fraction field of Z p . The rings 
Z p and fields Q p play a crucial role in modern number theory, and are present in 
virtually every discussion of the Hasse principle. The current paper is somewhat 
exceptional: in order to make this paper more accessible, we do not use the p-adic 
numbers or Hensel's lemma. We do discuss 1 p and Hensel's lemma in Appendix A, 
but for now we merely mention that, like M, the field Q p is complete for a certain 
absolute value, and much of real or complex analysis generalizes to Q p . In fact, 
number theorists often formally introduce a "prime" oo, and denote R by Qoo; the 
fields Q p for p a prime or oo give all the completions of Q and are called the local 
fields associated with Q: 




calculus number theory 



It is in this language that Hasse's theorem achieves its standard form. 

Theorem 3 (Hasse's Theorem: version 3). If F £ 1\X\, . . . , X m ] is homogeneous 
of degree 2, then F(X\, . . . ,X m ) = has a nontrivial ^-solution if and only if it 
has a nontrivial Q p -solution for all p (including p = oo). 

^For a proof that this is in some sense the most general counterexample, see Kraft and Rosen [7]. 
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We say that a class of homogeneous equations satisfies the Hasse principle or 
the local-global principle if each equation in the class has a nontrivial Z-solution if 
and only if (i) it has a nontrivial R-solution, and (ii) it has a primitive solution 
modulo iV for each N. As mentioned above, the Chinese remainder theorem allows 
us to replace (ii) by the following: (ii') it has a primitive solution modulo p k for 
each prime p and exponent k > 1. We formulate the Hasse principle for systems of 
homogeneous polynomials in a similar mannerQ 

However, the Hasse principle fails in general. In fact, it fails for the next obvious 
class of equations: cubic equations. The most famous example is due to Selmer [12j : 

3X 3 + AY 3 + 5Z 3 = 0. (3) 

This cubic obviously has nontrivial ]R-solutions and it can be shown to be locally 
solvable, but it has no global solutions^ 

What if one sticks to quadratic equations, but allows systems of equations? In 
this paper we will show that the Hasse principle also fails for this class. In particular 
we study systems of the form 

aU 2 + bV 2 + cW 2 = dZ 2 , UW = V 2 , (4) 

mainly when b = 0, and use elementary methods to produce counterexamples to 
the Hasse principle. The case where a — 1, b = 0, c = —17, and d — 2 is important 
since it was the first known counterexample to the Hasse principle for Diophantine 
equations^ It was produced by Lind 9 and Reichardt pj] several years before 
Selmer's. As we will discuss in Section[71 the system (Q| with a = 1, b = 0, c = — 17, 
and d = 2 can be transformed into the single (nonhomogeneous) equation 

X A - 17F 4 = 2Z 2 , (5) 

the form considered by Lind and Reichardt. 

The purpose of this article is to give a self-contained, accessible proof of the 
existence of counterexamples to the Hasse principle of the form , counterexamples 
similar to those of Lind and Reichardt's, using the easy and well-known technique 
of parametrizing conies to justify local solvability^ The only required background 
is a standard undergraduate course in number theory up to quadratic reciprocity, 



4 We formulate the Hasse principle for homogeneous equations in order to restrict our attention 
to integer solutions. In the language of algebraic geometry, this formulation asserts the existence 
of Q-points (global solutions) on the associated projective variety given the existence of Qp-points 
(local solutions) for all p including p = oo. 

^Showing the absence of global solutions is not elementary. Known proofs of this fact use the 
arithmetic of cubic number fields; one possible approach is to multiply (|3]l through by 2, change Z 
to —Z, and factor the left-hand side of the transformed equation 6X 3 + Y 3 = 10Z 3 over HJ(v / 6). 
In contrast, there are elementary proofs, like the one given in the current paper, that J5j has no 
global solutions. 

The work of Selmer on this problem led Cassels to introduce the notion of Selmer groups and 
to his groundbreaking work on Tate— Shafarevich groups in the theory of elliptic curves; nowadays, 
Selmer's example can be interpreted as representing an element of order 3 in the Tate-Shafarevich 
group HIe of the elliptic curve E : X 3 + Y 3 + 60Z 3 = 0. See pQ, [10], and our Appendix B for 
more on the relationship between counterexamples and the Tate-Shafarevich group. 

^Counterexamples to the Hasse principle for norms, according to which an element of a number 
field is a norm if and only if it is a norm in every localization, were known for noncyclic extensions 
already around 1934. 

^Other approaches use the less elementary method of quartic Gauss and Jacobi sums. Applied 
to quartics like aX 4 + bY 4 = Z 2 this method shows the solvability only for sufficiently large values 
of p, and making the bounds explicit is quite technical. Short but less elementary arguments can 
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and a standard undergraduate course in modern algebra up to basic facts about 
polynomials over rings and fields. (Material directed to a more advanced audience 
will be confined to the footnotes and the appendices.) As far as we know, this paper 
is unique in developing interesting counterexamples to the Hasse principle in such 
an elementary manner|j We hope that this paper will give a general mathematical 
audience a taste of this interesting subject. 

Variants of the Hasse principle, and the study of the manner in which these 
principles fail, is a very important and active area of current research^ As discussed 
in Appendix B, these counterexamples are of interest from the point of view of 
elliptic curves. 

We conclude this section by offering exercises showing the relationship between 
Legendre's theorem, discussed at the start of this section, and the Hasse principle. 
As above, assume that a, b, c S Z are such that abc is nonzero and square-free. 

Exercise 1. Let p be a prime. Call (xo, yo, z o) a p-focused triple if at most one of 
Xo, yo, zo is divisible by p. Show that any primitive solution to the congruence 

aX 2 + bY 2 + cZ 2 = (mod p 2 ) 

is p-focused. 

Exercise 2. Suppose that p | a and that the congruence aX 2 + bY 2 + cZ 2 = 
modulo p has a p-focused solution. Show that —be is a square modulo p. 

Conclude that if aX 2 + bY 2 + cZ 2 = modulo p has a p-focused solution for all 
odd p | a, then —be is a square modulo \a\. 

Exercise 3. Take Legendre's theorem as given and use the preceding exercise to 
show that if the congruence aX 2 + bY 2 + cZ 2 = modulo p has a p-focused solution 
for all odd primes p | abc, and if the equation aX 2 + bY 2 + cZ 2 = has a nontrivial 
M-solution, then aX 2 + bY 2 + cZ 2 = has a nontrivial Z-solution. 

Exercise 4. Use the above exercises to show that the Hasse principle for the 
equation aX 2 + bY 2 + cZ 2 = is a consequence of Legendre's theorem. 

3. Parametrizing Conics 

A standard method for finding Pythagorean triples is through the rational para- 
metrization of the unit circle {(x,y) € R 2 | x 2 + y 2 = l}. The parametrization 
is found by intersecting the circle with the line of slope t going through the point 
P = ( — 1,0) of the circle. The line defined by y = t(x + 1) intersects the circle 
defined by x 2 + y 2 — 1 = at points whose first coordinates satisfy the equation 
= x 2 + t 2 (x + I) 2 - 1 = (x + l)(x - 1 + t 2 x + 1 2 ). Thus, the points of intersection 
are the point P = (—1,0) we started with, as well as P t = (j^p-j rf^)- 

This parametrization leads us to the following identity in R[T]: 

(1 -T 2 ) 2 + (2T) 2 = (1 + T 2 ) 2 . (6) 



be given by appealing to the Hasse- Weil bounds for curves of genus 1 denned over finite fields, or 
F. K. Schmidt's result on the existence of points on genus 1 curves over finite fields. 

8 A less interesting, but simpler counterexample is (X 2 - 2Y 2 )(X 2 - 17Y 2 )(X 2 - 34Y 2 ) = 0. 
To find solutions modulo p k , use properties of the Legendre symbol, and Propositions ITl and l2l 

9 For some accounts of recent activity see Mazur 1101 or the summary of mini-courses by Colliot- 
Thelene and others (at http://swc.math.arizona.edu/oldaws/99GenlInfo.html). 




Specializing T to n/m with n, m G Z gives Pythagorean triples: 

(m 2 - n 2 ) 2 + {2mn) 2 = (to 2 + n 2 ) 2 . 

The above procedure is purely algebraic, and there is no problem modifying it 
to the equation ax 2 + by 2 = 1 over a general field F where a, 6 6 F are nonzero. 
Of course, we need a starting point: we need xq, Ho £ F such that ax^ + by 2 = 1. 
The analogue to ([5]) is displayed in the following lemma as (|7))F1 

Lemma 1. Let F be a field, and let a,b G F be nonzero. Let xo,yo G F be such 
that axQ + by 2 = 1. Then in F[T] 

aqf + bql = q 2 (7) 

where 

qi = bx Q T 2 - 2by T - ax , q 2 = ~by Q T 2 - 2ax Q T + ay , q 3 = bT 2 + a. 

Furthermore, at least two of q±, q 2 , 93 have degree exactly 2. Finally, if char F =/= 2, 
then each of q\ , q 2 , 93 is nonzero, and no two are associatesW\ 

Remark. The polynomials qi,q 2l <?3 are found using the parametrization method, 
but how they are discovered is not crucial to the proof below. What is important 
is that aq\ + bq\ = q 2 . 

Proof. A straightforward calculation verifies that aqf + bq\ — q 2 . Observe that 
degg 3 = 2 since b ^ 0. Since q 2 — aqf + bq 2 , we also have deggi = 2 or degq 2 = 2. 

Assume char F =^ 2. Since a and b are nonzero, and xq and yo are not both 0, 
each of qi,q 2 , 93 is nonzero. Suppose two of gi,<72,<?3 are associates. Then these 
two must have degree 2. The equation aq\ + bq 2 = q 2 then implies q\,q 2 ,q\ are all 
associates. By Lemma [2] below, q\ and q 2 are constant multiplies of (73. But this 
contradicts the fact that at least one of q\ or q 2 has a nonzero linear term. □ 

The above makes use of the following general fact: 



In the language of algebraic geometry, a nonsingular plane conic possessing at least one 
_F-rational point is isomorphic to P 1 via such a parametrization. The restriction to conies of the 
form ax 2 + by 2 = 1 is not a true restriction: if char F ^ 2 then every nondegenerate conic can be 
brought into the form ax 2 + by 2 = 1 with a projective transformation. 

^Recall that two nonzero polynomials of F[T] are associates if one is a constant multiple of 
the other. More generally, in any unique factorization domain, two nonzero elements are called 
associates if the second is the product of a unit with the first. 
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Lemma 2. Let a and b be nonzero elements of a unique factorization domain R. 
If a n and b n are associates for some positive n, then a and b are associates. 

Proof. Factor a and b into irreducible elements. Up to multiplication by units, o™ 
and b n have the same factorization. This means that a and b must also have the 
same factorization up to multiplication by units. □ 

The existence of <?i, 92, 93 in the above lemma depends on the existence of at least 
one solution oxq + byk = 1. For F = ¥ p the existence of such a solution follows 
from Euler's criterioni 12 ! 

Lemma 3. Let a and b be nonzero elements of the field ¥ p where p is a prime. 
Then there exist xo,yo 6 F p such that ax 2 , + by 2 , = 1 . 

Proof. If p = 2, take Xq = 1 and yo = 0. If p > 2, we wish to solve y 2 = f(x) 
where f(x) = — ax 2 ). If there are no solutions, then f(t) is a nonsquare for 

each t e F p . By Euler's criterion, /(i) (p_1 ) /2 = -1 for all t e ¥ p . However, this 
contradicts the fact that the degree-(p — 1) polynomial f{x) tyP ~ 1 ^ 2 + 1 has at most 
p — 1 roots. □ 

Remark. This result is due to Euler and arose from his attempt to prove Fermat's 
claim that every integer is the sum of four squares, a theorem finally proved by 
Lagrange (see [HI Chapter III §XI]). For that theorem, one uses the solvability of 
-x 2 - y 2 — 1 in F p . 

Remark. As we have seen, methods for parametrizing the unit circle turn out to 
apply to conies defined over general helds. This is an example of a major theme 
of arithmetic geometry, that many ideas of geometry carry over to other fields of 
interest to number theorists. The reader might be amused to see a further example. 
Figure [2] displays the plane over F7, which has 7 2 points, denoted by + or •, and 
the unit circle x 2 + y 2 — 1, consisting of 8 points, denoted by •. In the graph on 
the right, the line L : y = x + 3 is displayed. Note that every line in the affinc 
plane over F7 contains 7 points - the segment between, say, (0,3) and (1,4) is not 
part of the line: it is only drawn to help us visualize the line. We also remark that 
L can also be written as y — —6x + 3; this may change how we draw segments 
between the points but, of course, not the points on L. The line L intersects the 
unit circle in exactly one point, namely (2, 5), and hence is the tangent to the unit 
circle at this point. Similarly, x = 1 is the tangent to the unit circle at (1,0). The 
line y = 2x — 1 intersects the unit circle in exactly two points: can you see which? 

We leave it as an exercise to the reader to determine the interior of the unit 
circle: these are defined to be the points that do not lie on any tangent to the 
circle. For example, the points (1, x) with 1 < x < 6 are exterior points since they 
lie on the tangent at (1,0). 



Suppose p is an odd prime and a £ ¥ p is nonzero. Euler's criterion states that a is a 
square in the field ¥ p if and only if a( p-1 )/ 2 = 1, and that a is not a square in ¥ p if and only if 
(jfp- 1 )/ 2 = — 1. Euler's criterion is a consequence of the well-known result that the multiplicative 
group of nonzero elements of F p is cyclic of order p — 1. 

In fact, the multiplicative group _F X of any finite field F is cyclic. Thus Euler's criterion 
generalizes to any finite field F of odd order. One can also use the cyclic nature of _F X to show 
that every element of a finite field of even order is a square. As a consequence, Lemma|3]gcncralizes 
to arbitrary finite fields. 
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Figure 2. The unit circle over F7, and its tangent at (2, 5). 

4. Solutions modulo odd primes 

Let p be an odd prime. We now turn our attention to finding nontrivial solutions 
of the system 

aU 2 + cW 2 = dZ 2 , UW = V 2 

with values in F = F p . Here a,c,d S F p are assumed nonzero. 

Replacing a and c with ad -1 and cd~ x we can assume d — 1. The first equation 
aU 2 + cW 2 = Z 2 can be parametrized as in Section [31 This gives a family of 
solutions to the first equation, and we need to determine that at least one of these 
solutions also satisfies UW — V 2 . The following is a key ingredient to doing so E 

Lemma 4. Let f,g S F p [X] be nonzero polynomials of degree at most two. If 

(^) = f° r al1 f e ¥ p> or l f = f° r aU 1 e ¥ p> then f and 9 

are associates. 

Remark. The statement of this result uses the Legendre symbol ( — ) . If a 6 F p 



then the Legendre symbol can be defined as follows: 

1 if a is a nonzero square in F p , 
T if a is not a square in F p , 



if a = in F p . 



The Legendre symbol provides a convenient notation for the expression of theorems 
such as quadratic reciprocity or the simpler theorem that (^) = (-) (-). This last 
equation is a consequence of Euler's criterion: 

a (P-D/2 = (°L 
\p 

where we view the values 0, 1, —1 of the Legendre symbol as elements of F p . Recall 
p is an odd prime, so 0, 1, —1 are distinct. 

Proof. By Euler's criterion, (^) = /(t)d'- 1 )/ 2 and (^) = g(i) (p ~ 1)/2 . So if 
(/M) = (£(*!") for all t g Fpj then every t e F p is a root of /(p- 1 )/ 2 - g^- 1 )/ 2 . 
Recall that a nonzero polynomial in F p [T] of degree d has at most d roots since F p 



'Everything in this section extends easily to finite fields of odd order, not just prime fields. 
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is a field. The polynomial /(p -1 )/ 2 — giv- 1 )/ 2 has degree at most p — 1, but has p 
roots. We conclude that /(p -1 )/ 2 — gip- 1 )/ 2 is the zero polynomial. 
Since ¥ p [X] is a unique factorization domain, and since 

f {p-i)/2 = ff (p-i)/a j the 

polynomials / and are associates by Lemma [2j 

If {j^r) — ~ \p) f° r a ^ * e ^pi Pi°^ a nonsquare r in F p . Observe that 
(^rO = ( rg ) f° r a H t G F p , so / and r<? are associates by the conclusion of the 
previous case. In particular, / and g are associates. □ 

Theorem 1. Let p be an odd prime and let a,c,d G ¥ p be nonzero. Then the 
system 

all 2 + cW 2 = dZ 2 , UW = V 2 
has a nontrivial ¥ p -solution. 

Proof. As mentioned above, we reduce to the case d = 1. Parametrizing the conic 
all 2 + cW 2 = Z 2 as in Lemma [1] (using Lemma [3]) yields nonzero polynomials 
<7i) 92) Q3 £ IFpPI where aq\ + cq\ — q\ and where qi and (72 are not associates. 

By LemmaS]and the fact that q± and qi are not associates, there is a t 6 F p such 
that (SM) ^ -(^). So gi (t) and g 2 (i) arc not both zero and ( »W»»W ) ^ _ L 
Thus qi(t)q 2 (t) = v 2 for some w 6 F p . Hence J7 = gi(t),W = q2(t),Z = 93 (t), 
V = w is a nontrivial solution. □ 



5. Solutions modulo prime powers 

Now we focus on the p-local solvability of the system 

aU 2 + cW 2 = dZ 2 , UW = V 2 (8) 

where a,c,d are nonzero integers. A consequence of Theorem [T] is that if p is an 
odd prime and if p j acd then this system has a primitive solution modulo p. In 
this section we extend this result to powers of p. We also discuss the case of p = 2. 

For the convenience of the reader, we state and prove the following well-known 
result from elementary number theory. 

Proposition 1. Let p be a prime and let N and r > be integers such that p \ rN . 
If N is an rth power modulo p, then N is an rth power modulo p k for all k > 1. 

Proof. We proceed by induction on k. Suppose that N = a r modulo p k . Write 
N = a r + cp k , and let s be a solution to ra r ~ 1 x = c modulo p. Using the binomial 
expansion, 

(a + xp k ) r = a r + ra r ~ 1 xp k = a r + cp k (mod p k+1 ). 

□ 

We now consider the main result of this section. A strong solution modulo p k 
to the system ([8|) is a primitive solution (u, v, w, z) to the associated congruences 
modulo p k such that at least one of era, cw, dz is nonzero modulo the prime p. 

Theorem 2. Let p be an odd prime, and let a, c, d be nonzero integers. If 

aU 2 + cW 2 = dZ 2 , UW = V 2 

has a strong solution modulo p, then it has a strong solution modulo p k for all k. 
In particular, it is p-locally solvable. 
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Proof. Let (uq, vq, wq, zq) be a strong solution modulo p. Since au 2 , + cw 2 , = dz 2 , at 
least two of auo, cwo, dzo must be nonzero modulo p. By symmetry we can assume 
that auo is nonzero modulo p. Fix a power p k of p. Since p \ a and p \ uq, we can 
choose inverses a -1 , E Z modulo p fc . 

Let v = woUg -1 , w = wqUq 1 , and z = zqUq 1 . Then (l,v,w, z) also solves 
the system modulo p. So w = v 2 modulo p, and hence a + cv 4 = dz 2 modulo p. 
Since a -1 {dz 2 — ci> 4 ) = 1 modulo p, and since 1 is a fourth power, Proposition [T] 
guarantees the existence of an m € Z such that a -1 (dz 2 — cv 4 ) = m 4 modulo p . In 
other words, am 4 + cv 4 = dz 2 modulo p k , so (m 2 , mv, w 2 , z) is a solution modulo p k . 
It is a strong solution since m is nonzero modulo p. □ 

Theorem [2] and Theorem [1] yield the following: 

Corollary 1. If p is an odd prime such that p \ acd then the system 

all 2 + cW 2 = dZ 2 , UW = V 2 

is p-locally solvable: it has primitive solutions modulo p k for all k. 

For p = 2 the situation is more subtle. For example, the system 

U 2 + 3W 2 = 7Z 2 , UW = V 2 

has solution (1, 1, 1, 2) modulo 2. In fact, (1, 1, 1, 2) is a solution modulo 2 3 . How- 
ever, the system has no primitive solution modulo 2 4 . The following exercise pro- 
vides a shortcut for verifying the nonexistence of solutions modulo 16. 

Exercise 5. Consider the system all 2 + cW 2 = dZ 2 , UW = V 2 where a,c,deZ 
are odd. Show that if there is a primitive solution modulo 16, then there is a 
solution (it, v, w, z) with u,v,w € {0, 1} and z G {0, 1, 2, 3}. 

A difficulty with extending Theorem [2] to p = 2 is the failure of Proposition Q] 
to generalize: the integer 3 is a fourth power modulo p — 2 but not modulo 2 fe if 
k > 1. The following provides the needed variant to Proposition [TJ 

Proposition 2. If N = 1 modulo 2 4 , then N is a fourth power modulo 2 k for 
all k > 1. 

Proof. We use induction for k > 4. Suppose N = a 4 modulo 2 k where k > 4. Write 
N = a 4 + c2 k . Using the binomial expansion and the fact that a 3 = 1 modulo 2, 

(a + c2 fe - 2 ) 4 = a 4 + Aa 3 c2 k - 2 = a 4 + c2 k (mod 2 fe+1 ). 

□ 

Using this we can prove the following. Its proof is similar to that of Theorem [2] 
Theorem 3. Let a, c, d be nonzero integers. If the system 
all 2 + cW 2 = dZ 2 , UW = V 2 
has a strong solution modulo 2 4 , then it has a strong solution modulo 2 k for all k. 

In some cases there is no distinction between primitive and strong solutions: 

Lemma 5. Suppose p is a prime, k > 2, and a,c,d € Z are such that p 2 \ acd. 
Then every primitive solution to (Q modulo p k is a strong solution. 
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Proof. Let (u, v, w, z) be a primitive solution modulo p k that is not a strong solu- 
tion. We derive a contradiction in the case where p \ u; the other cases are similar. 
Since (it, v, w, z) is not a strong solution, p | a. Thus p \ cd. So p divides both 
w and z since (u, v, w, z) is not a strong solution. Looking at au 2 + cw 2 = dz 2 
modulo p 2 gives us that au 2 = modulo p 2 . Thus p 2 \ a, a contradiction. □ 

Corollary 2. Let p be a prime, and let a, c, d be integers such that p 2 j acd. If p 
is odd then the system (0 is p-locally solvable if and only if it possesses a strong 
solution modulo p. If p = 2, the system is p-locally solvable if and only if it possesses 
a strong solution modulo 2 4 . 

Proof. One direction follows from Theorems [5] and [3J For the other direction, 
suppose ((5J is p-locally solvable. So there is a primitive solution modulo p 4 . By 
Lemma[5j there is a strong solution modulo p . For the case where p is odd, observe 
that such a solution is also a strong solution modulo p. □ 

The general case where p 2 is allowed to divide acd will be considered in Section [7] 
6. Counterexamples to the Hasse principle 

The goal of this section is to identify counterexamples to the Hasse principle. 
These are systems that are locally solvable but not globally solvable: they lack 
nontrivial Z-solutions. 

We start with the question of local solvability. 

Proposition 3. Suppose 

(1) q and d are relatively prime nonzero integers and q is positive, 

(2) q = 1 modulo 16, 

(3) d is a square modulo p for all primes p \ q, and 

(4) q is a fourth power modulo p for all odd primes p \ d. 
Then the following system is locally solvable: 

U 2 - qW 2 = dZ 2 , UW = V 2 

Proof. Observe that (u, v, w, z) = (g 1 / 2 , q 1 / 4 , 1, 0) is a real solution. For all p \ 2qd, 
the system is p-locally solvable by CorollaryU] Observe that (w, v,w,z) = (1,1,1,0) 
is a strong solution modulo 16. By Theorem [3l the system is 2- locally solvable. 

Suppose p | q (so p is odd). Let m be such that m 2 = d modulo p. Then 
(u, v, w, z) = (m, 0, 0, 1) is a solution modulo p. Since d and q are relatively prime, 
p\ d. Thus the solution is strong. By Theorem [2l the system is p-locally solvable. 

Suppose p | d is odd. Let m be such that m 4 = q modulo p. Then (u, v, w, z) = 
(rn 2 , m, 1,0) is a solution modulo p. The solution is strong since p \ q. By Theo- 
rem [21 the system is p-locally solvable. □ 

Now we will find systems that have no nontrival Z-solutions. Our examples will 
rely on the following key lemma: 

Lemma 6. Let d be a nonzero square-free integer, and let q = 1 modulo 8 be a 
prime not dividing d. If the system U 2 — qW 2 = dZ 2 , UW = V 2 has a nontrivial 
1,-solution, then d is a fourth power modulo q. 

Proof. Since the system is homogeneous, it has a primitive solution (u, v, w, z). 
Observe that u and w must be relatively prime since d is square-free: if p | u and 
p | w then p | v and p 2 | dz 2 , so p 2 | d, a contradiction. A similar argument shows 
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that u and z are relatively prime, and w and z are relatively prime. Also, since 
u 2 w 2 — v A and u, w are relatively prime, u 2 and w 2 must be fourth powers. 

Let p be an odd prime dividing z. Modulo p we have u 2 = qw 2 . Let w' 1 be 
an inverse to w modulo p. So q = modulo p. In terms of the Legendre 

symbol: (2) = 1. Since q = 1 modulo 4, quadratic reciprocity tells us that (|) = 1. 

Thus (~) = 1 for all odd p \ z. Since q = 1 modulo 8 we also have (|) = 1 and 
(-^-) = I- By the multiplicativity of the Legendre symbol it follows that (|) = 1. 
Thus z 2 is a nonzero fourth power modulo q. 

We have that u 2 = dz 2 modulo q. We know that u 2 and z 2 are fourth powers 
modulo q. It follows that d is a fourth power modulo q. □ 

Now consider the system of homogeneous Diophantine equations 

U 2 - qW 2 = dZ 2 , UW = V 2 

where 

(1) q is a prime such that q = 1 modulo 16, 

(2) d is nonzero, square-free, and not divisible by q, 

(3) d is a square, but not a fourth power, modulo g, and 

(4) q is a fourth power modulo p for every odd p dividing d. 
Proposition [3] and Lemma [6] together gives us our main result. 

Theorem 4. The system ([9J is locally solvable but not globally solvable 
nontrivial "L-solutions. 

We end with a few specific examples of ©■ 

Example 3. Lind and Reichardt's example, the first known counterexample to the 
Hasse principle, is the following special case of Theorem SJ 

U 2 - 17W 2 = 2Z 2 , UW = V 2 . 

This is a counterexample since 2 is a square, but not a fourth power, modulo 17. 

Example 4. More generally, let q be a prime such that q = 1 modulo 16 and such 
that 2 is not a fourth power modulo q. In this case (|) = 1, so 

U 2 - qW 2 = 2Z 2 , UW = V 2 
gives a counterexample to the Hasse principle^ 
Example 5. For an example where d ^ 2, consider 

U 2 - 17W 2 = 19Z 2 , UW = V 2 . 

7. Further Issues 

We conclude by addressing two issues raised earlier. The first concerns the 
extension of Corollary [2] to the case where p 2 \ abc. The second concerns the rela- 
tionship between the systems studied in this paper and the Diophantine equation 
aX A + bX 2 Y 2 + cY 4 = dZ 2 studied by others. 

Actually, we need only assume q = 1 modulo 8 since (1, 1, 1, 2) is a strong solution modulo 16 
if q = 9 modulo 16. Also we note that this family of examples is infinite. In fact, the density of 
primes q with q = 1 modulo 8 such that 2 is not a fourth power modulo q is 1/8. This can be seen 
by applying the Chebotarev density theorem to the extension Q(\^2, i)/Q, whose Galois group is 
the dihedral group of order 8. 



(9) 



: it has no 
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Local Solvability. Corollary [2] gives necessary and sufficient conditions for the 
p- local solvability of the system all 2 + cW 2 = dZ 2 , UW = V 2 when p 2 \ abc. 
These conditions give a computationally effective procedure for deciding p-local 
solvability. We will now discuss an effective procedure for deciding p- local solvability 
even when p 2 \ abc. With Corollary Q] this implies that local solvability as a whole 
is effectively decidable (deciding R-solvability is easy). 

We begin with some terminology. Given nonzero integers o, c, d we refer to 
aU 2 + cW 2 = dZ 2 , UW = V 2 as the system (a, c, d). We write (a, c, d) ~ (a', c', d!) 
if the two systems are both p-locally solvable or neither is. 

Lemma 7. Let a, c, d gZ be nonzero integers and let p be a prime. Then 

(a,c,d) ~ (c, a,d) ~ (pa,pc,pd) ~ (ap ,cp , d) 

~ (a, c, dp 2 } ~ (ap 4 ,c, d) ~ (a,cp 4 ,d). 

Proof. We show that the p-local sovability of (a, c, d) implies that of (ap 4 , c, d) . The 
proofs of the other implications are similar. 

Suppose [u, v, w, z) is a primitive solution modulo p k to the system (a, c, d). Then 
(u,pv,p 2 w,p 2 z) is a solution modulo p k+2 to the system (ap 4 , c, d). If this solution 
is not primitive, divide each coordinate by the largest common power of p (either 
p or p 2 ) to obtain a primitive solution modulo p k ~ 2 to the system (ap 4 ,c, d). □ 

We can use Lemma [7| to reduce any given system to one where p j a, p > \ c, and 
p 2 { d. To this end, repeatedly apply (pa,pc,d) ~ (pa,pc,p 2 d) ~ (a, c,pd) until we 
get a system with p j a or p { c. Since (a, c, d) ~ (c, a, d) we can assume p \ a. Since 
(a,p 4 c, d) ~ (a, c, d) and (a, c,p 2 d) ~ (a, c, d) we can assume p 4 { c and p 2 j d. 

We can go further. 

Lemma 8. Lei (a, c, d) &e a system with p \ a, p 4 \ c and p 2 \ d. If c = p 2 co, and 
d = pdo where p\ Codo, then the system is not p locally-solvable. In all other cases, 
(a, 6, c) is equivalent to a system in which at most one coefficient is divisible by p. 

Proof. Suppose a system (a,p 2 Co,pdo) with p { acodo has a primitive solution 
(u, v,w, z) modulo p 3 . From au 2 + p 2 cqw 2 = pdgz 2 modulo p 3 , it follows that 
p | u, which in turn implies p | z. From p | u and uw = v 2 modulo p 3 , we get p | v, 
so p \ w (the solution is primitive) and p 2 | u. Hence p 3 | p 2 cqw 2 , a contradiction. 

Finally, (a,p 3 c,pd) ~ (p 4 a,p 3 c,pd) ~ (p 2 a,pc,pd) ~ (pa,c,d) ~ (c,pa,d), and 
(a,pc,pd) ~ (ap 4 ,pc,pd) ~ (ap 3 ,c, d) ~ (c,p 3 a, d). □ 

The following lemmas give effective tests for p-local solvability for the remaining 
reduced systems. 

Lemma 9. TVie systems (a, c, d), {a,cp,d), (a, c, dp), and (a,cp 3 ,d) with p \ acd 
are p-locally solvable if and only if they have strong solutions modulo p if p is odd, 
or modulo 16 if p — 2. 

Proof. This follows from Corollary [2] if the system is one of the first three. So we 
consider the system (a, cp 3 , d) where a, c, d are prime to p. 

First suppose p-locally solvability, and let (u, v, w, z) be a primitive solution 
modulo p 4 . If (u, v, w, z) is not strong, then p | u and p | z. This forces p { w since 
(it, u, w, z) is primitive. Since p | w, we have p 2 | u. So, dz 2 = modulo p 3 . Thus 
p 2 | z. Modulo p 4 we now have cp 3 w 2 = 0, contradicting the fact that c and w are 
prime to p. Thus (u, v, w, z) must be a strong solution modulo p 4 . 
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So if the system is p- locally solvable it possesses a strong solution modulo p 4 , 
and hence modulo p. The converse follows from Theorems [2] and 03 □ 

Lemma 10. The system (a,cp 2 ,d) with p\ acd is p-locally solvable if and only if 

(i) it has a strong solution modulo m, or 

(ii) the system (ap 2 ,c,d) has a strong solution modulo m. 

Here m = p if p is odd, but m = 16 if p = 2. 

Proof. Suppose p-local solvability holds, and let (u, v, w, z) be a primitive solution 
modulo p 6 . If p\ u, the solution is strong. Suppose p \ u. This implies that v 2 = 
and dz 2 = modulo p. So u, v, z are zero modulo p. Since (u, v, w, z) is primitive, 
p \ w. Since p | v, we get p 2 | u. Observe that iujp 2 , v/p, w, z/p) is a strong solution 
modulo m to the system (ap 2 , c, d). 

Conversely, if (i) the system (a,cp 2 ,d) has a strong solution modulo m, then it 
is p-locally solvable by Theorems [2] and [3l If (ii) the system (ap 2 , c, d) has a strong 
solution modulo m, then the system (ap 2 ,c,d) is p-locally solvable by Theorems [2] 
and [3] Since (ap 2 , c, d) ~ (ap 2 , cp , d) ~ (a, cp 2 , d) the system (a, cp 2 , d) is p-locally 
solvable as claimed. □ 

Exercise 6. If p is an odd prime then the test for p-local solvability can be made 
very explicit. Suppose p \ acd. The system (a, c, d) is p-locally solvable and the 
system (a,cp 2 ,dp) is not p-locally solvable. Show that the systems (a,cp,d) and 
(a, cp 3 , d) are p-locally solvable if and only if ad is a square modulo p. Show that the 
system (a, c, dp) is p-locally solvable if and only if — ac 3 is a fourth power modulo p. 
Finally, show that the system (a, cp 2 , d) is p-locally solvable if and only if ad or cd 
is a square modulo p. 

Relationship with the Quartic. We now relate the systems studied in this paper 
with the nonhomogeneous quartic equation 

aX 4 + bX 2 Y 2 + cY 4 = dZ 2 . (10) 

The main body of this paper treats the b = case of the system 

aU 2 + bV 2 + cW 2 =dZ 2 , UW = V 2 , (11) 

and the appendices consider the general case which is important in the study of 
elliptic curves. We now show that the solvability of (|10p and the solvability of (fTTj) 
are equivalent in many situations. In particular, Z-solvability, R-solvability, and 
Fp-solvability are covered by the following: 

Lemma 11. Let a,b,c,d G R where R is an integral domain. Then the system (jlip 
has a nontrivial R-solution if and only if (|10j) has a nontrivial R-solution. 

Proof. If d = then both (fTTj) and (ITUl) have obvious solutions, so suppose d ^ 0. 

If (ieo: 2/o, z o) is a nontrivial solution to (fT0"| then (xq, £o2/o, Ho, z q) is a nontrivial 
solution to (fTTj) . 

If (uo, uo, wo, zo) is a nontrivial solution to (fTTj) . then both (uo, fo, zqUq) and 
(wo, wo, ^owo) are solutions to (jlOl) . At least one is nontrivial since d ^ 0. □ 

The questions of modulo-p fc solvability (for k > 1) and p-local solvability are 
covered by the following. For simplicity we assume p 2 \ d. 
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Lemma 12. Let p be a prime and k > 1. Suppose that a, b, c, d € Z are swc/i that 
p 2 \ d. Then the system (|lip /ias a primitive solution modulo p k if and only if the 
equation (|10|) has a primitive solution modulo p k . 

Proof. If (xo, yo, z o) is a primitive solution to (|10[) modulo p k then (xq, xoyo, 2/o> z o) 
is a primitive solution to (jlip modulo p . 

If (uo, Uoj wo, zq) is a primitive solution to (jlip modulo p fe , then (itg, «o, zo^o) 
and (uo, wq, z wo) are both solution to (fTU|) modulo p fe . We claim that at least one 
of u Q , vq or w must be prime to p. Otherwise, by assumption z is prime to p, and 
since dz 2 = aug + bvg +cwq modulo p k , it follows that p 2 \ d, a contradiction. With 
this claim, we see that at least one of the solutions is primitive. □ 

Appendix A: The p-adic integers and Hensel's lemma 

In Section |4] we defined p- local solvability in terms of solvability modulo p k . 
As alluded to in the introduction, the usual definition of p-local solvability refers 
to p-adic solutions rather than solutions modulo p k . In this appendix we sketch 
an argument that our definition is equivalent to the p-adic definition. Then we 
introduce a basic tool, Hensel's lemma, which is a standard method for finding Z p - 
solutions. Both the p-adic integers and Hensel's lemma will be used in Appendix B 
where we discuss an important generalization of the systems considered above. This 
appendix and the next are designed for readers with some familiarity with the p-adic 
numbers. 

We begin with a quick review of the p-adic numbers. A p-adic integer is a 
sequence (01,02,03, . . .) with the following properties for each k: (i) € Z/p fe Z, 
and (ii) the image of a^+t under the natural projection Z/p fe+1 Z — > Z/p fe Z is 
equal to a^. The set Z p of such sequences forms an integral domain with addition 
and multiplication defined componentwise. Its field of fractions is denoted by Q p . 
There is a natural injective ring homomorphism Z — > Z p defined by sending a to 
(01,02, . . .) where is the image of a in Z/p fe Z. Thus we can identify Z with a 
subring of Z p and Q with a subfield of Q p . The multiplicative structure of Z p is 
simple: every nonzero element is uniquely of the form up m where u is a unit in Z p . 
The units of Z p are the elements (01,02, . . .) such that ai is a unit in Z/pZ. For 
an introduction to the p-adic numbers with prerequisites similar to those of the 
current paper see [5]. 

Proposition 4. For a system of homogeneous equations with coefficients in 1, the 
following are equivalent: 

(1) The system has primitive solutions modulo p k for all k. 

(2) The system has a nontrivial Z p -solution. 

(3) The system has a nontrivial <Q p -solution. 

Proof. The conditions (2) and (3) are equivalent since the system is homogeneous. 
Suppose (2) holds with nontrivial Z p -solution (sci, . . . ,x m ). Let p A be the largest 
power of p dividing all the X{. By dividing each Xi by p A we can assume that at 
least one coordinate is a unit in Z p . Write x\ = (an, a^, ■ ■ .). Then, for each fc, the 
n-tuple (aifc, . . . , a m k) yields a solution modulo p k . Since there is a coordinate Xi 
that is a Z p -unit, the corresponding is a Z/p^Z-unit. So (ciifc, . . . , a m k) is a 
primitive solution modulo p k . We conclude that (2) (1). 

Finally suppose that (1) holds. Let m be the number of variables. To produce a 
Z p -solution it is sufficient to produce Ck = (c/-i, . . . , Cfe m ) e Z m for each k such that 
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(i) Ck is a primitive solution modulo p k and (ii) Ck+i is congruent (componentwise) 
to Ck modulo p k . To facilitate the construction, we also consider the condition (hi) 
Ck is inhnitely extendable in the following sense: for all A > k there is a primitive 
solution modulo p x congruent modulo p k to Ck- 

Let Ci be a primitive solution modulo p that satisfies (iii). If no such solution 
exists then either there is no primitive solution modulo p contradicting (1), or there 
are a hnite number of modulo-p-distinct solutions but where each is not infinitely 
extendible. By choosing A large enough, we get a modulus p* with no primitive 
solutions, also contradicting (I). Thus Ci exists. Now suppose Ci, . . . , c u have been 
selected for which (i) holds for k < u, (ii) holds for k < u, and (iii) holds for k < u. 
Choose c u +i to be any primitive solution modulo p u+1 that reduces modulo p u 
to c u and for which (iii) holds with k = u + 1. Such c u +i exists: otherwise (iii) 
would fail for c u . This construction yields a sequence ci,C2,cs, . . . satisfying (i), 

(ii) , and (iii) for all k. So (1) (2). □ 

Hensel 's lemma refers to a family of results that allows us to "lift" modulo p k 
solutions to Zp-solutions. Here is a basic version for polynomials. 

Proposition 5. Let f G Z P [T] be a polynomial with derivative /'. //t £ Z p is such 
that f(t) = modulo p but f'(t) ^ modulo p, then there is a unique u G Z p such 
that f(u) = and such that u = t modulo p. 

Remark. There are refinements that deal with the case f'(t) = modulo p. 

Appendix B: connections to Elliptic Curves 

In this appendix we assume some familiarity with elliptic curves defined over Q. 
Consider the system 

aU 2 +bV 2 + cW 2 = dZ 2 , UW = V 2 (12) 

with a,b,c,d G Z such that a, c, d, and b 2 — 4ac are nonzero. Up to this point we have 
concentrated on the case 6 = 0, which is rich enough to yield simple counterexamples 
to the Hasse principle. In general, (fT2j) defines a nonsingular projective curve of 
genus 1 given as the intersection of quadric surfaces 

Such genus- 1 curves arise naturally in the 2-descent procedure used to find gen- 
erators and the rank for the group of rational points E(Q) of an elliptic curve E. 
The system (|12p is adapted to the case where E is defined over Q and possesses at 
least one Q-rational 2-torsion point, and the question of the existence of nontrivial 
Z-solutions of ()12j) plays an important role in the 2-descent procedure. 

Another connection between system ([T2|) and elliptic curves occurs when (fl2|) is 
a counterexample to the Hasse principle. In that case, (|12[) represents an element 
of order 2 of the Tate-Shafarevich group Ills of the elliptic curve E defined by 
the equation y 2 = x 3 — 2bdx 2 + (b 2 — Aac)d 2 x. For example, Lind and Reichardt's 
counterexample, which we studied in the form 

U 2 - 17W 2 = 2Z 2 , UW = V 2 , 



lo This curve is a double cover of the projective planar conic all 2 + bUW + cW 2 = dZ 2 . By 
counting ramification points of this cover, and using the Riemann-Hurwitz formula, one can verify 
that the genus of the curve is indeed one. The curve defined by I I12H is an elliptic curve defined 
over Q if and only if l|12j l possesses a nontrivial Z-solution. 
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represents an element of order 2 in UIe where E is defined by y 2 = x 3 — 2 4 17x 
(which can be transformed into the form y 2 = x 3 — 17 x). The Tate-Shafarevich 
group is conjecturally finite, and is tied to another important conjecture: the con- 
jecture of Birch and Swinnerton-Dyer. 

Much of the study of local solvability considered in the main body of the paper 
extends to the system (|12jl . For example, we can generalize Corollary [1] as follows: 

Theorem 5. The system (|12p is p-locally solvable for all primes p \ 2acd(b 2 — Aac) . 

We end this appendix with the proof of the above theorem. The idea is to first 
show that there is a solution modulo p, and then use Hensel's lemma to derive a 
Zp-solution. 

One way to prove the existence of solutions modulo p is to use a theorem of 
F. K. Schmidt (also proved by Chatelet) according to which any smooth curve of 
genus 1 defined over a finite field ¥ q has an F 9 -rational point. Similarly, one can 
appeal to the Riemann hypothesis for curves over a finite field, proved by A. Weil. 
In this appendix we instead provide an elementary proof. 

Lemma 13. Let p be an odd prime, and consider 

aU 2 + bV 2 + cW 2 = dZ 2 , UW = V 2 

with a,b,c,d £ ¥ p , and with acd(b 2 — Aac) ^ 0. This system has a nontrivial 
¥ p -solution. 

Proof. By multiplying the first equation by d _1 we reduce to the case where d = 1. 
We now use the technique of completing the square on f(X, Y) = aX 2 + bXY+cY 2 . 
Let qi, 92, 93 S F p [T 1 ] be as in Lemma Q] applied to aX 2 + (^c - Y 2 = Z 2 . Thus 

aqf + (c - ql = q%. So, if q[ = qi - ±q 2 then 

/(<7i,<72) = a(q x - ±q 2 f + b ( qi - ±q 2 ) q 2 + cq\ = aq\ + (c- ql = ql 

Since qi and q 2 are not associates, q[ is nonzero, and q[ and q 2 cannot be 
associates. So, by Lemma SI there is a t 6 ¥ p such that (2ilL^ ^ — (M£i), So 
q[(t)q 2 (t) = s 2 for some s E ¥ p , and q[(t) and q 2 (t) are not both 0. In particular, 
(q[(t), s, q2(t), 93(4)) is a nontrivial solution. □ 

The above gives us modulo-p solutions to (TT2"j) . To use this to produce Z p - 
solutions we need a special case of Hensel's lemma: 

Lemma 14. Let p be a prime not dividing 2ac(b 2 — 4ac) where a,b,c G Z. // 
f(T) = aT A + bT 2 + c has a root modulo p, then f has a root in Z p . 

Proof. Let t 6 Z be such that f(t) = modulo p. Suppose f'(t) = modulo p 
where /' = AaT 3 + 2bT. In other words, ~Aat 3 = 2bt modulo p. Observe that t ^ 
modulo p since /(0) — c and p \ c. Also p is odd. Thus —2at 2 = b modulo p. So 

= -(4a)a£ 4 - {Aa)bt 2 - (4a)c = -b 2 + 2b 2 - Aac = b 2 - Aac (mod p) 



contradicting our assumption. Thus f'(t) ^ modulo p. The result now follows 
from Hensel's lemma (Proposition [5]). □ 
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Proof of Theorem^ Let (uo, vq, wq, zq) be a primitive solution to the system fj 12[) 
modulo p (Lemma ll3p . If p divides both uq and wq, it must divide vq and zq as well, 
contradicting the assumption that the solution is primitive. By symmetry between 
U and W we can assume that wq is prime to p. In particular wq is a unit in Z p . 

Let u = uq Wq 1 , v = vq Wq 1 , and z = zo w^ 1 in Z p . Then (it, v, 1, z) also solves 
(|12|) modulo p. Someii 2 , and hence aw 4 + 6v 2 + c = dz 2 , modulo p. 

We first consider the case where z = modulo p. In this case v is a root, 
modulo p, of the polynomial f(T) — aT 4 + bT 2 + c. By Lemma [T4l there is a t e Z p 
such that /(i) = 0. Observe that (t 2 ,t, 1,0) is a Z p -solution to (jl2]l . 

Now suppose z ^ modulo p. Then z is a root, modulo p, of the polynomial 
/(T) = dT 2 - (av i + bv 2 + c). Observe that f{z) = 2dz ^ modulo p. By Hensel's 
lemma (Proposition [5]) there is a f S Z p so that f(t) = 0. In particular (v 2 ,v, l,t) 
is a Zp-solution to (|12j) . □ 

Remark. For more on elliptic curves over Q, consult [T], [TS], and [33]. At a more 
advanced level see [TU] . 
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